Dian Gemilang Dgnews
3 CVEs affecting Dian Gemilang Dgnews. Latest disclosed: 2007-06-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2007-2994 | | 2007-06-04 | SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a fullnews action… | |
CVE-2007-0694 | | 2007-05-30 | Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web script or HTML via the copyright parameter. | |
CVE-2007-0693 | | 2007-05-30 | SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action… |